[CODE]
2006-12-29,14:41:48
System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation]
<updatereal><C:\WINDOWS\realupdate.exe other> [N/A]
<winsamps><C:\WINDOWS\winamps.exe> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<kis><"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"> [Kaspersky Lab]
<runeip><C:\Program Files\Rising\AntiSpyware\runiep.exe> [Beijing Rising Technology Co., Ltd.]
<5ranbr><rundll32.exe C:\WINDOWS\lhijtijf81v4d.dll _start@16> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Corporation]
<Userinit><c:\windows\system32\userinit.exe,> [(Verified)Microsoft Corporation]
<UIHost><logonui.exe> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCardLogn]
<WinlogonNotify: ScCardLogn><C:\WINDOWS\ScNotify.dll> [Microsoft Corporation]
==================================
启动文件夹
[服务器管理]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\服务器管理.lnk --> C:\PROGRA~1\NINETO~1\iCSP_SM\IPROCE~2.EXE [ ]><N>
==================================
服务
[ASP.NET State Service / aspnet_state][Stopped/Manual Start]
<C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation>
[卡巴斯基互联网安全套装 6.0 / AVP][Stopped/Auto Start]
<"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r><Kaspersky Lab>
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[ninetowns_iCSP_sm / ninetowns_iCSP_sm][Running/Auto Start]
<c:\program files\ninetowns corp\icsp_sm\icsp.remoteservice.exe><九城口岸软件科技有限公司>
[P4P Service / P4P Service][Running/Auto Start]
<C:\Program Files\Common Files\Sogou PXP\p2psvr.exe><Sohu.com Inc.>
==================================
驱动程序
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
<system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[amdk5 / amdk5][Stopped/Auto Start]
<\??\C:\WINDOWS\system32\drivers\amdk5.sys><N/A>
[kl1 / kl1][Running/Boot Start]
<\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
[klif / klif][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
[Input and output operations / ntio256][Stopped/Auto Start]
<\??\C:\WINDOWS\system32\ntio256.sys><N/A>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[RsAntiSpyware / RsAntiSpyware][Running/Boot Start]
<\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising>
[Realtek RTL8139/810x/8169/8110 all in one NDIS NT Driver / RTL8023][Running/Manual Start]
<system32\DRIVERS\Rtlnic51.sys><Realtek Semiconductor Corporation>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Stopped/Manual Start]
<system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32\DRIVERS\secdrv.sys><N/A>
[SiS315 / SiS315][Running/Manual Start]
<system32\DRIVERS\sisgrp.sys><Silicon Integrated Systems Corporation>
[SiS AGP Filter / SISAGP][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\SISAGPX.sys><Silicon Integrated Systems Corporation>
[SiSkp / SiSkp][Running/System Start]
<system32\DRIVERS\srvkp.sys><Silicon Integrated Systems Corporation>
[TSP / TSP][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
[vhew / vhewu][Stopped/Boot Start]
<\SystemRoot\System32\DRIVERS\vhewu.sys><N/A>
==================================
浏览器加载项
[TXDJQWCHNS]
{6FBF6595-ECED-409D-8F92-09883D646113} <C:\WINDOWS\system32\CGHNUZGLSXDIOU.DLL, N/A>
[XBTBPos00 Class]
{88C43374-ECEE-4DB9-A06E-F69C7871B0A9} <C:\PROGRA~1\ABOBEF~1\CAB301~1.DLL, N/A>
[TBSB02607 Class]
{92CE9EC0-A77A-4A62-91F3-007C6E45BA47} <C:\PROGRA~1\KASPER~2\tbu00764\kaka.dll, N/A>
[Google Toolbar Helper]
{AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
[XBTBPos00 Class]
{B9038294-CA95-4ACB-B289-818A0563C55F} <C:\PROGRA~1\ABOBEF~1\tbu05615\CAB301~1.DLL, N/A>
[Bar888]
{C1B4DEC2-2623-438e-9CA2-C9043AB28508} <C:\PROGRA~1\COMMON~1\{34CCB~2\Bar888.dll, N/A>
[]
{D3341007-C77C-4F1C-B2A5-D94D5BE55F7E} <C:\WINDOWS\system32\mkbrberwifftqjs.dll, N/A>
[IEHlprObj Class]
{DE7C3CF0-4B15-11D1-ABED-709549C10000} <C:\WINDOWS\POPNTS.DLL, >
[XBTP02060 Class]
{E66D09C9-B25B-465e-9E7A-6020E60FB363} <C:\PROGRA~1\MIOROS~1\MIOROS~1.DLL, N/A>
[]
{F770522B-198D-4134-9D74-D30F41B3BA44} <C:\WINDOWS\system32\pfqyhuswpqntjdf.dll, N/A>
[启动迅雷5]
{09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <d:\Program Files\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD>
[Web反病毒保护]
{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll, Kaspersky Lab>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, N/A>
[&Google]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
[Miorosoft Office]
{7BEBDE34-060C-40E1-ABDD-ED9B0866B2C6} <C:\Program Files\Miorosoft Office\Miorosoft Office.dll, N/A>
[Kaspersky Anti-Virus]
{8498248D-CDCE-4E95-8F88-B8C9BF96A1C2} <C:\Program Files\Kaspersky Anti-Virus\tbu00764\kaka.dll, N/A>
[Abobe Flash Play 9]
{F85E8BAB-1A14-4090-9C50-6B9141450239} <C:\Program Files\Abobe Flash Play 9\Cab301b48.dll, N/A>
[Abobe Flash Play 9]
{772546DC-8719-4F80-B82F-B3A92AAC96C7} <C:\Program Files\Abobe Flash Play 9\tbu05615\Cab301b48.dll, N/A>
[Bar888]
{C1B4DEC2-2623-438e-9CA2-C9043AB28508} <C:\PROGRA~1\COMMON~1\{34CCB~2\Bar888.dll, N/A>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[Shockwave Flash
Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[Google Script
Object]
{00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <c:\program files\google\googletoolbar2.dll, Google Inc.>
[MMCPlayer Class]
{05C1004E-2596-48E5-8E26-39362985EEB9} <d:\Program Files\Sogou PXP\MMCShell.dll, Sohu.com Inc.>
[UserCpuCard Control]
{16F2448E-8C16-11D1-9A11-0080C8E1561F} <C:\WINDOWS\system32\USERCP~1.OCX, EPort>
[Windows Media Player]